US hosting company reveals hacks, citing disclosure law